Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa
File:                     3137372e36362e3230342e302f32322d3234203d3e203532363737.roa (raw, json)
Hash identifier:          KS35uIVWKb8OUd3BHR3jqXlN7gfi+7Ql8m7AGUDOLxE=
Subject key identifier:   44:F3:EC:64:FE:35:CE:5C:01:88:8B:D3:53:33:9D:70:B3:3E:90:8E
Certificate issuer:       /CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
Certificate serial:       29B2F2F41E915A56E8053AD01B36F59B58031822
Authority key identifier: D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa
Signing time:             Thu 21 Mar 2024 18:49:30 +0000
ROA not before:           Thu 21 Mar 2024 18:44:30 +0000
ROA not after:            Thu 20 Mar 2025 18:49:30 +0000
asID:                     52677
IP address blocks:        177.66.204.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b2:f2:f4:1e:91:5a:56:e8:05:3a:d0:1b:36:f5:9b:58:03:18:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EECEBFA6498EC7786E99D794BC594E9420DF2A
        Validity
            Not Before: Mar 21 18:44:30 2024 GMT
            Not After : Mar 20 18:49:30 2025 GMT
        Subject: CN=44F3EC64FE35CE5C01888BD353339D70B33E908E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:47:c6:04:7d:a8:9b:d9:ab:68:3e:e4:8c:
                    dc:74:9b:80:83:db:8c:b5:ac:06:f9:b3:0f:eb:62:
                    66:88:d4:95:b6:98:75:23:08:15:05:11:9a:13:2c:
                    5a:f6:d2:7d:a6:63:82:71:cd:16:e0:72:3c:5a:c9:
                    21:df:b6:b8:90:94:f3:6a:75:8f:f7:91:3d:0b:1f:
                    03:9a:eb:74:12:5b:08:59:80:a4:88:7a:d7:90:e4:
                    aa:1b:f3:56:50:aa:2e:da:2f:17:65:2f:a3:b2:00:
                    08:cc:35:d8:b1:13:42:60:f5:68:b8:c5:12:79:f3:
                    3e:0b:a4:c6:dc:1e:6d:37:28:7e:88:d6:97:7a:2a:
                    7e:e3:5f:47:f0:a3:7d:8b:ca:15:6e:1f:6e:20:10:
                    ec:34:aa:dd:99:40:8d:36:c7:94:5c:cf:75:7d:90:
                    7a:72:ff:45:43:15:96:52:e1:f7:0d:cd:f7:f2:93:
                    8f:aa:26:8f:8b:c7:9d:00:00:ad:8c:95:9f:d1:a8:
                    e9:f6:a1:61:af:97:29:fb:1f:34:31:ed:d4:e9:33:
                    f4:6e:05:43:c8:fb:a9:d6:f8:3a:67:98:6a:3d:ea:
                    3c:a0:9b:09:6b:6e:a5:cb:6c:a7:05:ef:5d:fe:a0:
                    b5:45:03:50:e5:97:f0:a5:9b:d6:da:c7:c4:b7:10:
                    16:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F3:EC:64:FE:35:CE:5C:01:88:8B:D3:53:33:9D:70:B3:3E:90:8E
            X509v3 Authority Key Identifier:
                keyid:D7:EE:CE:BF:A6:49:8E:C7:78:6E:99:D7:94:BC:59:4E:94:20:DF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7EECEBFA6498EC7786E99D794BC594E9420DF2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3rRW4A8FkoofpREck2Ac5TTfXd5v5A6CFQsKBqyU93Ci/1/3137372e36362e3230342e302f32322d3234203d3e203532363737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:70:92:48:41:ca:33:9e:af:a1:56:9f:1c:28:4c:98:ec:78:
         47:e6:d8:61:4a:ae:13:21:84:79:c3:b4:fb:ed:f3:a0:8e:79:
         8f:3a:29:61:0b:2b:06:ed:09:1c:d5:07:bb:94:7a:df:e0:ba:
         b1:91:d5:2c:3d:e9:f5:57:84:bf:f4:b3:6e:73:96:ef:24:79:
         d3:6a:33:4f:3f:e7:f0:64:7a:c6:25:bb:69:69:60:0f:6c:3f:
         2c:b2:c3:e3:6f:f9:82:47:d3:9a:a4:58:a5:2b:08:82:1a:2a:
         28:f8:f9:59:94:b4:be:79:45:ed:4a:b1:bb:a1:14:54:ab:f9:
         35:bd:7e:34:4d:17:22:1b:aa:0e:80:71:46:e7:2a:fb:a6:f5:
         17:58:f3:e1:34:9a:89:1b:9d:3f:23:d2:c4:bb:db:ec:35:f1:
         9d:71:49:4b:50:4a:68:dc:f7:f1:78:9e:0d:00:63:41:16:a8:
         3a:e6:6c:2a:c9:90:82:8f:23:9c:3c:89:25:22:f3:07:59:5b:
         c0:8a:8b:70:a4:bc:98:7a:82:d6:8d:63:68:95:80:f9:cc:4d:
         d5:ca:5b:6b:6d:3b:ad:04:17:a5:74:c7:bf:b2:11:c8:38:03:
         dc:90:e9:92:23:b5:33:69:b0:97:ce:d5:de:16:ce:c9:6e:4e:
         20:fb:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org